CVE-2016-4753

Description (CNA)

Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://support.apple.com/HT207141
• http://www.securitytracker.com/id/1036858
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
• http://www.securityfocus.com/bid/93059
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html
• https://support.apple.com/HT207170
• https://support.apple.com/HT207142
• https://support.apple.com/HT207143

ADP enrichment